Static task
static1
Behavioral task
behavioral1
Sample
tmpzw8628nm.exe
Resource
win7-20231129-en
General
-
Target
tmpzw8628nm
-
Size
209KB
-
MD5
dca799ab332b1d6b599d909e17d2574c
-
SHA1
a719e91031ed18bb70dd78684b012eb072efdb03
-
SHA256
0157b43eb3c20928b77f8700ad8eb279a0aa348921df074cd22ebaff01edaae6
-
SHA512
e66ed7fdeb87938b3a1a74e0acf63ba8de35d7a4f05f894b78b342e1ca459fa54146f46b3b873d454e56a86a3fb73b190fa9b0758d68e67757120663cf0f2407
-
SSDEEP
3072:ZpGX9PK+E+iavjw4+Px2YAlWNkaYsYXP7wL8khFIbCFW64wKi:ZpE9Q6jwTPx2tokaYsYDwnhubCFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmpzw8628nm
Files
-
tmpzw8628nm.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ